
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87967f65-655d-3461-9798-7da1d1467545.roa
File: 87967f65-655d-3461-9798-7da1d1467545.roa (raw, json)
Hash identifier: s4SKpP4dYuvLxMJlGHBP++moKs7DOSu7/p3IAWphBGs=
Subject key identifier: 88:D3:27:27:F7:FD:7B:1C:6B:FB:45:36:78:A3:BC:35:14:60:C0:87
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4978C8B029AD5F19A8806100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87967f65-655d-3461-9798-7da1d1467545.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33662
IP address blocks: 2001:559:85aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:78:c8:b0:29:ad:5f:19:a8:80:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4f095ff5-eea9-43c0-bafe-dd489cd4cd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:84:94:44:13:08:7d:4a:8d:11:04:1e:16:
5f:ba:06:ae:36:7f:02:26:a2:ee:5c:02:93:1d:e3:
7f:dd:26:10:43:86:92:ca:61:f0:17:62:16:76:d1:
8b:5b:b3:26:f7:e9:51:fd:ef:ba:79:91:a1:64:a9:
1e:35:d9:6c:35:f2:d2:55:f1:ab:77:b1:92:eb:bd:
60:d5:53:22:5e:2e:66:7f:93:aa:e5:5c:4c:ad:d8:
78:95:b5:c7:ca:ef:7f:3d:2a:8d:27:b5:b6:5d:43:
ce:ad:d5:af:b7:c2:b2:03:ae:af:6b:44:bb:5b:3c:
ab:2b:e4:17:87:1f:bc:0a:52:25:c3:0a:f5:e9:6c:
bd:46:37:44:63:38:25:2f:69:c9:fe:aa:1c:95:d8:
f2:ed:b7:51:00:2c:67:d8:18:30:30:ff:a7:dd:c6:
72:98:a1:18:b7:95:9a:42:42:c1:d1:07:ba:73:38:
3e:76:c5:8d:a5:5e:58:e5:95:c5:6a:fa:f6:8e:bb:
09:57:85:6c:66:4a:85:db:c3:93:e8:45:5f:9a:7e:
3e:80:71:a4:e5:fd:7e:c3:aa:08:cc:7b:42:a2:f0:
92:ee:4a:40:06:fc:44:38:e3:28:f3:26:6a:74:17:
24:88:fd:4a:83:d9:87:68:d7:d6:61:70:30:83:68:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:27:27:F7:FD:7B:1C:6B:FB:45:36:78:A3:BC:35:14:60:C0:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87967f65-655d-3461-9798-7da1d1467545.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:85aa::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e6:bd:65:cd:dc:f0:f7:d5:7c:7e:0e:03:96:75:91:a3:e5:
0d:7c:38:1f:e9:f3:aa:ec:f6:47:00:a0:d9:66:6a:9d:7e:f1:
d1:88:7e:08:94:e9:e5:f2:ee:d5:46:62:21:74:1a:65:54:35:
8c:4b:cc:ce:8c:01:1d:08:9a:71:55:33:2f:58:64:6f:8f:9a:
b5:92:43:d9:dd:19:c9:bc:b0:1a:9c:2e:a2:4b:48:99:93:7e:
3a:90:5b:34:e6:1b:06:65:04:df:64:b4:7f:7b:0e:48:12:0e:
28:38:10:16:dc:ba:c3:b2:65:ee:f8:f6:d6:9d:45:b7:7b:fa:
f9:b2:57:4c:2d:d5:d6:fa:93:b7:54:56:40:45:d7:e1:35:2d:
ca:f7:b0:04:a1:43:34:0f:f1:ae:80:54:0b:7b:3d:df:f1:db:
0f:8b:03:91:c8:70:4c:97:87:d3:ae:35:8e:b1:b5:6f:37:04:
bd:b5:cd:50:b1:9f:dd:3c:22:88:48:78:6f:8b:33:fb:c4:83:
fb:69:95:fd:5e:22:e6:cc:7f:a4:c4:a6:c0:c9:18:3d:88:fb:
eb:a4:86:b7:90:14:38:0b:58:3d:e6:2c:31:28:f9:8e:9c:b1:
1f:22:56:45:b9:81:97:a1:62:cb:e3:ab:41:12:63:88:b3:0d:
58:b8:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:53:45 2026 by rpki-client